Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/EB4F1EF8AEE4A26C4DC57296A09CEC403648D98A3F97E7B3A47707B1337DDAD0/0/34352e36352e3235342e302f32332d3234203d3e203535303032.roa
File:                     34352e36352e3235342e302f32332d3234203d3e203535303032.roa (raw, json)
Hash identifier:          tLqhBZU6rGok6eryoWZzzzf7M4Fuw6pb7rmHJaARIsY=
Subject key identifier:   2C:4A:E7:AA:61:54:6F:45:66:8A:71:86:5F:06:CC:64:41:86:3C:4A
Certificate issuer:       /CN=799047095697CAFF9BFB195F0DA85EBCCC395DCE
Certificate serial:       565870CF6508B39652465C99585F3F5CEEDA1FCB
Authority key identifier: 79:90:47:09:56:97:CA:FF:9B:FB:19:5F:0D:A8:5E:BC:CC:39:5D:CE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/799047095697CAFF9BFB195F0DA85EBCCC395DCE.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/EB4F1EF8AEE4A26C4DC57296A09CEC403648D98A3F97E7B3A47707B1337DDAD0/0/34352e36352e3235342e302f32332d3234203d3e203535303032.roa
Signing time:             Tue 05 Mar 2024 17:53:49 +0000
ROA not before:           Tue 05 Mar 2024 17:48:49 +0000
ROA not after:            Tue 04 Mar 2025 17:53:49 +0000
asID:                     55002
IP address blocks:        45.65.254.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/EB4F1EF8AEE4A26C4DC57296A09CEC403648D98A3F97E7B3A47707B1337DDAD0/0/799047095697CAFF9BFB195F0DA85EBCCC395DCE.crl
                          rsync://repository.lacnic.net/rpki/lacnic/EB4F1EF8AEE4A26C4DC57296A09CEC403648D98A3F97E7B3A47707B1337DDAD0/0/799047095697CAFF9BFB195F0DA85EBCCC395DCE.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/799047095697CAFF9BFB195F0DA85EBCCC395DCE.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 23 May 2024 17:37:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:58:70:cf:65:08:b3:96:52:46:5c:99:58:5f:3f:5c:ee:da:1f:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=799047095697CAFF9BFB195F0DA85EBCCC395DCE
        Validity
            Not Before: Mar  5 17:48:49 2024 GMT
            Not After : Mar  4 17:53:49 2025 GMT
        Subject: CN=2C4AE7AA61546F45668A71865F06CC6441863C4A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:cc:90:56:d6:61:d0:23:35:30:a4:a8:f7:f5:
                    14:38:b6:95:59:c6:11:59:f1:28:3e:ce:0e:38:e8:
                    c4:2a:a0:cc:93:1e:ab:c6:fc:af:78:07:41:2c:76:
                    fc:19:ba:0f:be:19:7e:fb:6e:ce:68:cc:1a:5f:b0:
                    86:50:6c:ca:21:b3:b1:a1:b9:89:e6:e8:9c:63:60:
                    41:3e:93:aa:ee:42:fa:94:2b:74:04:85:2b:7c:43:
                    28:12:4e:52:9f:c0:5f:83:30:f9:28:c1:be:87:fa:
                    eb:fc:6c:d6:b9:05:7d:3c:81:ef:d8:5b:ce:45:95:
                    64:37:85:b1:36:11:c7:e8:10:bb:85:ea:4f:96:cc:
                    f9:f8:cf:35:1b:1d:1e:79:eb:69:07:49:34:34:d4:
                    3b:7d:2c:67:db:2b:15:a7:37:d5:95:0c:c7:a5:35:
                    d7:6f:28:63:ba:1a:e3:1f:df:d7:f9:75:08:13:ab:
                    7a:4e:57:78:48:a6:4f:0c:56:ac:46:2d:0d:14:ee:
                    67:5c:c4:2d:5c:01:6b:46:1c:0b:7d:c5:01:e8:27:
                    31:79:a7:59:9c:69:97:f5:df:e2:90:ab:55:d7:c2:
                    7f:53:60:66:54:f5:55:dc:90:e8:90:31:7d:b4:b9:
                    1f:14:47:fb:e6:30:47:0b:9f:a5:0b:08:f9:aa:af:
                    da:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:4A:E7:AA:61:54:6F:45:66:8A:71:86:5F:06:CC:64:41:86:3C:4A
            X509v3 Authority Key Identifier:
                keyid:79:90:47:09:56:97:CA:FF:9B:FB:19:5F:0D:A8:5E:BC:CC:39:5D:CE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/EB4F1EF8AEE4A26C4DC57296A09CEC403648D98A3F97E7B3A47707B1337DDAD0/0/799047095697CAFF9BFB195F0DA85EBCCC395DCE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/799047095697CAFF9BFB195F0DA85EBCCC395DCE.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/EB4F1EF8AEE4A26C4DC57296A09CEC403648D98A3F97E7B3A47707B1337DDAD0/0/34352e36352e3235342e302f32332d3234203d3e203535303032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.65.254.0/23

    Signature Algorithm: sha256WithRSAEncryption
         1c:e1:c0:15:ad:bd:51:b7:1d:50:8e:15:6a:0b:bc:cb:d9:a2:
         a7:09:dd:88:c9:b3:cd:e2:d0:1c:cc:08:0f:7c:dd:db:8b:aa:
         21:da:a0:69:ed:af:e3:b4:44:60:2c:ec:5e:f0:c7:58:74:b3:
         3d:ac:dc:2e:b0:83:b8:4a:ba:ad:74:af:92:b2:b1:18:47:a4:
         5c:52:0b:f6:2e:63:1f:ef:92:b6:f7:43:7d:99:be:da:a0:6c:
         18:d6:75:02:72:42:2d:ec:10:bf:93:7f:a6:14:77:dd:f3:41:
         9e:8e:dd:75:af:48:b5:09:f9:79:e6:f5:e2:f5:d9:5f:8a:69:
         05:c8:93:23:2e:9f:d6:f0:ce:13:a9:8a:d6:e7:ae:8f:55:d8:
         aa:86:05:03:0b:0f:42:55:fa:b7:3c:f3:16:5f:35:6d:e0:18:
         07:60:8c:0f:86:13:27:ab:05:a4:4a:7c:6b:a1:96:6c:c6:5a:
         6e:db:21:d5:21:63:ee:c5:51:e1:f1:c7:eb:03:47:de:c1:b0:
         8e:f0:71:30:34:95:0a:ff:66:f6:b2:7b:00:70:f4:cf:78:14:
         c7:6f:fa:64:58:df:ee:de:1b:6b:61:c1:92:20:0f:d3:b5:1e:
         52:10:c0:8d:24:ce:8f:f4:2a:b9:95:72:66:75:d5:49:3c:5e:
         af:cd:50:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 20 06:57:05 2024 by rpki-client on console-fra.rpki-client.org